Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0256: python-js2py Security Advisory Updates
CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code References: - https://bugs.mageia.org/show_bug.cgi?id=33354
Oracle8: ELSA-2024-4260: python-idna Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2024-4264: openldap Low Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:2307-1 important: krb5 Security Advisory Updates
* bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370
SUSE: 2024:2308-1 important: go1.21 Security Advisory Updates
* bsc#1212475 * bsc#1227314 Cross-References: * CVE-2024-24791
SUSE: 2024:2309-1 important: go1.22 Security Advisory Updates
* bsc#1218424 * bsc#1227314 Cross-References: * CVE-2024-24791
Gentoo: GLSA-202407-17: BusyBox: Security Advisory Updates
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202407-16: GNU Coreutils: Buffer Overflow VulnerabilitySecurity Advisory Updates
A vulnerability has been discovered in Coreutils, which can lead to a heap buffer overflow and possibly aribitrary code execution.
SUSE: 2024:2305-1 important: krb5 Security Advisory Updates
* bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370
Gentoo: GLSA-202407-15: GraphicsMagick: Security Advisory Updates
Multiple vulnerabilities have been discovered in GraphicsMagick, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202407-14: TigerVNC: Security Advisory Updates
Multiple vulnerabilities have been discovered in TigerVNC, the worst of which could lead to remote code execution.
Gentoo: GLSA-202407-13: WebKitGTK+: Security Advisory Updates
Multiple vulnerabilities have been discovered in WebKitGTK+, the worst of which could lead to arbitrary code execution
Gentoo: GLSA-202407-12: podman: Security Advisory Updates
Multiple vulnerabilities have been discovered in Podman, the worst of which could lead to privilege escalation.
Gentoo: GLSA-202407-11: PuTTY: Security Advisory Updates
Multiple vulnerabilities have been discovered in PuTTY, the worst of which could lead to compromised keys.
Gentoo: GLSA-202407-10: Sofia-SIP: Security Advisory Updates
Multiple vulnerabilities have been discovered in Sofia-SIP, the worst of which can lead to remote code execution.
Fedora 39: cockpit 2024-9eb3674b7c Security Advisory Updates
Automatic update for cockpit-320-1.fc39. Changelog for cockpit * Wed Jul 03 2024 Packit - 320-1 - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2…
Ubuntu 6879-1: Virtuoso Open-Source Edition Security Advisory Updates
Virtuoso Open-Source Edition could be made to crash if it received specially crafted input.
Mageia 2024-0255: openvpn Security Advisory Updates
Control channel: refuse control channel messages with nonprintable characters in them. (CVE-2024-5594) References: - https://bugs.mageia.org/show_bug.cgi?id=33…
Mageia 2024-0254: chromium-browser-stable Security Advisory Updates
Use after free in Dawn. (CVE-2024-6290, CVE-2024-6292, CVE-2024-6293) Use after free in Swiftshader. (CVE-2024-6291) References: - https://bugs.mageia.org/show…
SUSE: 2024:2301-1 important: netatalk Security Advisory Updates
* bsc#1226429 * bsc#1226430 * bsc#1226431 Cross-References:
SUSE: 2024:2302-1 important: krb5 Security Advisory Updates
* bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370
SUSE: 2024:2303-1 important: krb5 Security Advisory Updates
* bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370
SUSE: 2024:2299-1 important: apache2-mod_auth_openidc Security Advisory Updates
* bsc#1219911 * bsc#1227261 Cross-References: * CVE-2024-24814
SUSE: 2024:2300-1 important: krb5 Security Advisory Updates
* bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370